FileZen CVE-2026-25108 Added to CISA KEV List Following Active Exploitation

The Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that a serious vulnerability in FileZen is being actively exploited. The flaw is tracked as CVE-2026-25108. Because of confirmed attacks, CISA added it to its Known Exploited Vulnerabilities catalog. This means the threat is real and organizations must act quickly. FileZen is a secure file transfer … Continued

Lazarus Group from North Korea Tied to Medusa Ransomware Operations

North Korea’s well-known Lazarus hacking group has been linked to recent attacks involving Medusa ransomware. Security researchers confirmed this connection after analyzing real-world incidents. The discovery shows how the group continues to expand its cyber operations. It also highlights the growing overlap between nation-state actors and ransomware campaigns. According to cybersecurity experts at Symantec, a … Continued

FBI Warns ATM Jackpotting Surge Has Cost Banks Over $20 Million in 2025

The Federal Bureau of Investigation (FBI) has issued a warning about a sharp rise in ATM “jackpotting” attacks across the United States. According to the agency, banks have lost more than $20 million in 2025 due to these incidents. The alert highlights a growing trend targeting ATM machines directly. Officials say the scale of these … Continued

MuddyWater Launches “Operation Olalampo” Targeting MENA with GhostFetch, CHAR, and HTTP_VIP

A well-known hacking group called MuddyWater has launched a new cyberattack campaign targeting organizations in the Middle East and North Africa (MENA). Security researchers have named this campaign “Operation Olalampo.” The activity was first observed on January 26, 2026. Experts say the attacks mainly focus on government bodies, businesses, and critical sectors in the region. … Continued

Trade Secret Theft Charges and Apple Zero-Click Spyware Expose Dual Cybersecurity Threats

Federal prosecutors in the United States have indicted three individuals linked to Silicon Valley over the alleged theft of trade secrets. The case involves two former Google engineers, Samaneh Ghandali and Soroor Ghandali, along with Mohammadjavad Khosravi. The charges were announced by the U.S. Attorney’s Office for the Northern District of California. Authorities say sensitive … Continued

PromptSpy Becomes First Android Malware to Use Generative AI at Runtime

A new Android malware named PromptSpy has been discovered by cybersecurity researchers. It is being described as the first known Android malware to use generative AI while running on a device. This marks a significant change in how mobile threats are being developed. Instead of relying only on fixed code, this malware can make decisions … Continued

Africa-Wide Cybercrime Crackdown Leads to 651 Arrests, $4.3 Million Recovered in INTERPOL Operation

Police agencies across Africa arrested 651 suspects in a major cybercrime crackdown carried out with the support of INTERPOL. The operation was named Operation Red Card 2.0 and was conducted between 8 December 2025 and 30 January 2026. It focused on organized online scam networks operating across multiple countries. The action highlighted the growing concern … Continued

Newsletter line